Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
Scripps Mercy Hospital
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on May 22, 2014. Also cited in 72 other reports.
Report ID: WG7L11, California Department of Public Health
Reported Entity: SCRIPPS MERCY HOSPITAL
Issue:
Based on interview and record review, the hospital failed to safe guard protected health information, (PHI - any information about health status, provision of health care, or payment of health care, that can be linked to a specific individual from unauthorized person) in accordance with their policy and procedure, for 1 sampled patient (1). Patient 1's PHI was inadvertently given to the wrong patient upon discharge.Findings:On 4/8/14 at 4:08 P.M., the hospital reported that hospital staff inadvertently gave Patient 1's PHI (medication list) to the wrong person. Per the report, both of the patients were discharged from the hospital on the same day and their documents became commingled. She further stated that the staff should have verified that all of the pages of the document were for the correct patient.On 5/22/14 at 11:00 A.M. the investigation was initiated with the Director of Risk Management (DRM). ON 5/22/14 at 11:30 A.M. the hospital's policy and procedure titled, "Confidentiality of Information" dated 11/15/13, was reviewed. It included that the hospital," is committed to safeguarding our patient's privacy and the confidentiality of records and related information for all patients, employees, donors, and for organizational and operating information. It is the responsibility of every (hospital) employee, medical staff member, contractor, volunteer, or third party having access to (hospital) information to follow all of (hospital) policies and to safeguard all Confidential Information."On 9/11/15 at 1:30 P.M., the Clinical Risk Specialist (CRS) acknowledged that this policy was not implemented, when the Patient 1's PHI was not safeguarded and was inadvertently given to the incorrect person.
Outcome:
Deficiency cited by the California Department of Public Health: Patients' Rights